Re: Changing client-side behavior regarding Certificate Revocation Lists (CRL) - Mailing list pgsql-hackers

> On 25 Aug 2026, at 17:24, Jacob Champion <jacob.champion@enterprisedb.com> wrote:
> On Tue, Aug 25, 2026 at 1:08 AM Daniel Gustafsson <daniel@yesql.se> wrote:

>> I think a stricter CRL policy would need another trigger.
>
> More fuel for the fire of a .libpqrc, maybe?

That could certainly be a trigger.  I was also thinking around how we have a
set of sslmodes which cover the usecases of yesteryear with less options for
todays world of security hardening, but .libpqrc is likely a better fit here.

--
Daniel Gustafsson